csrf

When doing a POST or PUT request with the new-ish fetch() API:

fetch('/URL', {
  method: 'PUT',
  body: 'whatever',
  headers: { 'csrf-token': csrf }
}).then(res => res.json()).then(res => {
  console.log(res);
});

I receive a typical error of:

ERROR { ForbiddenError: invalid csrf token
...
code: 'EBADCSRFTOKEN' }

After many hours searching the web a

@justinas

I'm newbie in everything.

I would like to write a Wiki page for newbies like me. Would you mind, @justinas?

Title: "How to use nosurf with external Single Page Application (SPA) like Ember, React, Angular or jQuery Ajax".

My app is both SPA and server rendered: authentication (using authboss - https://github.com/volatiletech/authboss) and I also have the Javascript part, so I need

May	JUN	Jul
	15
2019	2020	2021

csrf

Here are 221 public repositories matching this topic...

Hacker0x01 / hacker101

blaCCkHatHacEEkr / PENTESTING-BIBLE

expressjs / csurf

Add credentials warning to documentation

evilcos / xssor2

justinas / nosurf

Wiki page for newbies doubts and problems

symfony / security-csrf

Mr-xn / Penetration_Testing_POC

1N3 / BlackWidow

s0md3v / Blazy

gorilla / csrf

softwaremill / akka-http-session

RefreshTokenStorage schedule documentation

0xInfection / XSRFProbe

s0md3v / Bolt

pillarjs / csrf

auraphp / Aura.Session

reddelexc / hackerone-reports

mike-works / web-security-fundamentals

mebjas / CSRF-Protector-PHP

dunglas / DunglasAngularCsrfBundle

electrode-io / electrode-csrf-jwt

oktadeveloper / okta-spring-boot-react-crud-example

RickWong / fetch-plus

skiptomyliu / solutions-bwapp

Gregwar / Formidable

ring-clojure / ring-anti-forgery

dschadow / JavaSecurity

fastsitephp / fastsitephp

YasserGersy / cazador_unr

zadewg / LIVEBOX-0DAY

TYRMars / WebSafe-StepPitGuide

Improve this page

Add this topic to your repo